Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: +WuX/yxomVQGvIHVSwnKFLQvWFgZgyCxfvtQBIIkrx0=
Subject key identifier: 19:7D:F7:6B:B4:09:97:4F:0A:6F:7F:E8:01:94:03:83:D6:09:6D:C7
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 0198D4DFE440C510683CF403CC126BF7A00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0A42
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: yYAQuT0VE2/1Q+7jyfJ31nWNlLFC3A2mScD75JD1hLM=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e4:40:c5:10:68:3c:f4:03:cc:12:6b:f7:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=197df76bb409974f0a6f7fe801940383d6096dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:90:d9:14:b1:18:97:0b:61:d9:3a:9e:0f:
e1:96:ed:f6:9f:83:a4:3e:3e:1b:0a:82:ba:16:6f:
0f:1a:ca:79:7e:14:5a:ae:99:13:a9:fe:72:42:6f:
99:4d:ba:40:1a:32:ce:0a:68:71:85:79:d3:e9:c9:
c1:99:8b:9c:a1:72:26:1a:bf:13:2d:31:d9:70:a6:
b2:6b:3b:fd:75:13:69:e1:b6:77:e3:11:3f:61:47:
06:30:ca:70:d4:cb:4a:27:60:c2:fa:d8:5b:d9:f1:
11:2e:34:b5:3d:a1:c8:1f:d7:4c:d1:2f:e1:59:23:
17:22:81:b2:b1:7e:37:da:10:a3:bc:4b:2b:94:3d:
4e:b9:8e:7a:70:5b:4d:21:2f:0d:97:01:04:3f:94:
d5:88:b9:3d:bf:bf:ed:19:28:d6:4a:c2:95:dc:24:
e3:41:36:54:a4:b0:78:36:eb:4a:0e:22:1c:e2:07:
cb:1a:55:f8:ce:1b:a3:6d:e1:b4:b5:ce:e8:b4:85:
61:7c:c1:dd:44:3c:97:96:6f:bb:82:59:ea:87:11:
38:93:77:b3:57:48:4e:de:f0:1f:71:3e:64:61:c2:
e6:1b:9c:7a:b6:05:93:f2:a0:8e:e2:9a:1c:10:73:
32:c5:97:a3:55:d6:b4:84:28:6a:48:24:76:47:42:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7D:F7:6B:B4:09:97:4F:0A:6F:7F:E8:01:94:03:83:D6:09:6D:C7
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:9d:58:a0:da:83:dd:31:54:3b:60:62:97:0b:48:ff:a2:
aa:23:9d:93:7c:fe:4c:70:38:b5:71:46:16:ad:48:f4:11:30:
dd:d4:5a:9c:1b:9a:bc:27:a6:81:38:d2:75:c4:28:5e:9b:78:
d5:1d:71:c2:4b:10:ff:2e:ca:be:d9:35:c5:a8:63:b7:c5:ae:
e9:73:57:47:fb:8c:f2:77:17:9d:ba:14:f3:f4:bc:74:b6:ca:
1f:f2:d3:22:18:09:90:6f:e1:7b:33:b9:34:7f:47:36:bf:b1:
90:48:33:ac:9d:b0:a3:8d:89:d3:eb:fe:b8:69:4b:0a:76:09:
0b:8d:ec:66:c7:b4:a9:3a:bf:a6:39:85:27:9e:e2:5d:cb:37:
5f:26:11:bf:3f:45:51:77:9f:4f:be:7c:eb:b3:65:f6:ab:99:
1b:37:dd:7f:b6:37:8e:f0:33:7d:c3:b8:cc:c4:6d:0f:88:33:
8d:e2:31:41:c9:46:3a:e6:9f:70:c9:bc:f0:36:8e:29:52:bb:
16:95:2e:2b:b3:d1:55:4f:83:76:50:45:b4:26:0e:fa:57:43:
62:8f:e9:1a:be:35:91:c1:8b:14:f6:d4:d9:b1:53:bc:28:f9:
b3:47:78:f5:82:5e:15:c4:16:71:f7:7f:ee:54:e3:c3:a1:9d:
39:38:d6:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+RAxRBoPPQDzBJr96APMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjUwODIzMDMwMTM5WhcNMjUwODI0MDMwMTM5WjAzMTEwLwYDVQQD
EygxOTdkZjc2YmI0MDk5NzRmMGE2ZjdmZTgwMTk0MDM4M2Q2MDk2ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2Q2RSxGJcLYdk6ng/hlu32n4Ok
Pj4bCoK6Fm8PGsp5fhRarpkTqf5yQm+ZTbpAGjLOCmhxhXnT6cnBmYucoXImGr8T
LTHZcKayazv9dRNp4bZ34xE/YUcGMMpw1MtKJ2DC+thb2fERLjS1PaHIH9dM0S/h
WSMXIoGysX432hCjvEsrlD1OuY56cFtNIS8NlwEEP5TViLk9v7/tGSjWSsKV3CTj
QTZUpLB4NutKDiIc4gfLGlX4zhujbeG0tc7otIVhfMHdRDyXlm+7glnqhxE4k3ez
V0hO3vAfcT5kYcLmG5x6tgWT8qCO4pocEHMyxZejVda0hChqSCR2R0KKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl992u0CZdPCm9/6AGUA4PWCW3HMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx6dWKDa
g90xVDtgYpcLSP+iqiOdk3z+THA4tXFGFq1I9BEw3dRanBuavCemgTjSdcQoXpt4
1R1xwksQ/y7Kvtk1xahjt8Wu6XNXR/uM8ncXnboU8/S8dLbKH/LTIhgJkG/hezO5
NH9HNr+xkEgzrJ2wo42J0+v+uGlLCnYJC43sZse0qTq/pjmFJ57iXcs3XyYRvz9F
UXefT75867Nl9quZGzfdf7Y3jvAzfcO4zMRtD4gzjeIxQclGOuafcMm88DaOKVK7
FpUuK7PRVU+DdlBFtCYO+ldDYo/pGr41kcGLFPbU2bFTvCj5s0d49YJeFcQWcfd/
7lTjw6GdOTjW3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:29 2025 by rpki-client